$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa File: f1da8eef-2bc0-3710-a530-fd8280e346c5.roa (raw, json) Hash identifier: RfDwQHfj4AABdNmgt0Ry2t2X5qkuBuVYX6Bok85Tlgw= Subject key identifier: 3F:DF:2F:97:28:0B:C0:1D:34:1F:21:C9:88:DB:56:8F:43:60:96:6C Certificate issuer: /CN=d50d9265-ed86-4e53-88b9-cd56c607704f Certificate serial: 010D0C9F4328584B3C51AC91B7904EA9A94A5B80 Authority key identifier: 00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 400438 IP address blocks: 2606:afc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:ac:91:b7:90:4e:a9:a9:4a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50d9265-ed86-4e53-88b9-cd56c607704f Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=588576cc-01b4-4449-b53f-ba0b6ea0144d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:b5:c0:84:3e:6e:f9:2b:49:71:51:8f:8d: fb:f8:42:d5:60:54:50:af:cb:17:e1:06:26:99:34: 7e:21:25:18:80:95:c6:ed:62:d4:0c:f2:f8:25:16: a0:9f:ff:e1:ea:d5:c0:55:11:7c:ec:9f:00:39:c6: 9e:19:cf:36:98:cc:1b:96:75:80:8d:14:2a:7c:5b: ee:fa:63:c2:cc:9b:b1:df:69:4c:28:f6:28:52:d1: f6:68:7a:61:b1:97:25:91:a1:93:50:8e:6d:b3:e2: 08:78:04:66:c9:f1:4f:27:04:80:57:6f:62:a0:46: af:c6:68:47:a8:57:88:f5:fa:f4:55:d2:8c:cc:e4: d6:b7:64:cd:93:b7:3d:a2:af:e2:e6:82:69:05:3c: 65:17:62:ee:c1:3b:76:2a:26:6f:47:58:41:89:f1: 0f:93:44:18:96:04:d4:9e:3c:23:97:c1:30:5a:ab: cd:2a:3f:7b:52:a6:e2:6f:3f:b3:5e:62:d2:96:f6: d1:de:d4:c2:9b:78:8b:60:b6:cc:2b:4f:65:22:f7: 0f:df:6a:79:67:88:c2:d8:d3:f1:d4:c7:ec:04:58: ca:2a:ff:9a:9b:2c:08:9c:86:b5:89:9f:f8:81:8e: 32:97:cd:bf:19:01:9c:79:74:0a:57:c8:8d:3a:07: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DF:2F:97:28:0B:C0:1D:34:1F:21:C9:88:DB:56:8F:43:60:96:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl X509v3 Authority Key Identifier: keyid:00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer sbgp-ipAddrBlock: critical IPv6: 2606:afc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:99:d8:a3:7e:7f:69:bf:8a:22:8f:99:86:48:d2:d5:a7:f2: 18:16:ba:3c:45:99:24:0d:80:a2:7d:d5:fa:01:07:bc:98:10: 6c:9a:b3:a6:89:e0:3f:01:28:58:37:ab:aa:c2:02:6c:de:a0: 5b:d7:ae:5e:89:3d:1d:52:e1:f9:6b:3b:43:7d:18:e6:2b:06: ed:6a:b8:15:18:eb:01:a7:95:86:52:7d:bf:fb:03:4f:93:65: 8b:6f:06:ae:df:aa:c9:ae:58:08:9a:cd:72:64:fa:e5:cc:a1: ce:c8:3c:bb:8f:67:07:00:14:99:cb:cd:26:ad:44:75:0b:f9: 09:da:60:fe:91:12:2d:05:f1:cc:69:64:3f:18:1d:17:46:78: d9:37:f8:fd:b4:dc:b7:c8:3b:b2:22:1d:a7:dd:1f:72:ac:0d: f7:01:37:9f:e4:6c:a0:b5:f0:50:96:e4:97:49:57:42:d6:24: 96:dc:b3:9d:c3:34:7c:7b:bd:5b:16:16:cc:af:ee:6d:03:ea: b6:08:04:19:2d:a1:fa:ad:94:c8:87:c9:e9:68:15:26:a0:cb: 31:d2:b3:10:f0:d9:16:1b:55:df:2d:3c:cc:72:9e:48:58:9e: f9:5c:a9:dd:1b:cf:cd:61:e5:74:a0:b1:4c:03:ac:5f:76:0b: 8c:c4:7f:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs8UayRt5BOqalKW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUwZDkyNjUtZWQ4Ni00ZTUzLTg4YjktY2Q1NmM2MDc3 MDRmMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NTg4NTc2Y2MtMDFiNC00NDQ5LWI1M2YtYmEwYjZlYTAxNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIi1wIQ+bvkrSXFRj437+ELVYFRQr8sX4QYm mTR+ISUYgJXG7WLUDPL4JRagn//h6tXAVRF87J8AOcaeGc82mMwblnWAjRQqfFvu +mPCzJux32lMKPYoUtH2aHphsZclkaGTUI5ts+IIeARmyfFPJwSAV29ioEavxmhH qFeI9fr0VdKMzOTWt2TNk7c9oq/i5oJpBTxlF2LuwTt2KiZvR1hBifEPk0QYlgTU njwjl8EwWqvNKj97Uqbibz+zXmLSlvbR3tTCm3iLYLbMK09lIvcP32p5Z4jC2NPx 1MfsBFjKKv+amywInIa1iZ/4gY4yl82/GQGceXQKV8iNOgdCQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD/fL5coC8AdNB8hyYjbVo9DYJZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTBk OTI2NS1lZDg2LTRlNTMtODhiOS1jZDU2YzYwNzcwNGYvZjFkYThlZWYtMmJjMC0z NzEwLWE1MzAtZmQ4MjgwZTM0NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDUwZDkyNjUtZWQ4Ni00ZTUzLTg4 YjktY2Q1NmM2MDc3MDRmL2Q1MGQ5MjY1LWVkODYtNGU1My04OGI5LWNkNTZjNjA3 NzA0Zi5jcmwwHwYDVR0jBBgwFoAUAD5IHJ8853ianmehop2S7BelUjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTBkOTI2NS1lZDg2LTRlNTMtODhiOS1jZDU2 YzYwNzcwNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgavwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCimdijfn9pv4oij5mGSNLVp/IYFro8RZkkDYCifdX6AQe8mBBsmrOm ieA/AShYN6uqwgJs3qBb165eiT0dUuH5aztDfRjmKwbtargVGOsBp5WGUn2/+wNP k2WLbwau36rJrlgIms1yZPrlzKHOyDy7j2cHABSZy80mrUR1C/kJ2mD+kRItBfHM aWQ/GB0XRnjZN/j9tNy3yDuyIh2n3R9yrA33ATef5GygtfBQluSXSVdC1iSW3LOd wzR8e71bFhbMr+5tA+q2CAQZLaH6rZTIh8npaBUmoMsx0rMQ8NkWG1XfLTzMcp5I WJ75XKndG8/NYeV0oLFMA6xfdguMxH/2 -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:28 2025 by rpki-client